Which of the following is considered an exploit event?

An exploit event is the specific action of using a piece of code or a technique to take advantage of a security vulnerability in a system or application. This action is a direct attempt to trigger unintended behavior, which can lead to a security compromise. The exploit itself is the method, and the exploit event is the actual occurrence of that method being used against a target. This is a foundational concept in understanding how threat actors turn a theoretical weakness (vulnerability) into an actual adverse event.

B. A security breach is a potential outcome of an exploit event, but not all exploits result in a breach, and not all breaches are caused by exploits.
C. This describes a risk event or an incident in general terms; an exploit event is a more specific type of adverse event involving a vulnerability.

1. ISACA. (2020). IT Risk Fundamentals Study Guide, 2nd Edition. Chapter 2: Risk Identification, p. 36. The guide explains that a threat actor exploits a vulnerability, which is the direct action described.

2. National Institute of Standards and Technology (NIST). (2012). Special Publication 800-30, Revision 1: Guide for Conducting Risk Assessments. Appendix D, p. D-4. Defines "exploit" as "A technique to take advantage of a vulnerability." The event is the application of this technique.